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Abstract 

Assume Alice and Bob share some bipartite d-dimensional quantum state. A well-known 
result in quantum mechanics says that by performing two-outcome measurements, Alice and 
Bob can produce correlations that cannot be obtained locally i.e., with shared randomness 
alone. We show that by using only two bits of communication, Alice and Bob can classically 
simulate any such correlations. All previous protocols for exact simulation required the com- 
munication to grow to infinity with the dimension d. Our protocol and analysis are based on 
a power series method, resembling Krivine's bound on Grothendieck's constant, and on the 
computation of volumes of spherical tetrahedra. 

1 Introduction 

Quantum correlations: Consider the following game |fl2| . Alice receives a bit a, and Bob receives 
a bit b, both chosen uniformly at random. Their task is to output one bit each in such a way that 
the XOR of the bits they output is equal to AND(a,b). In other words, they should output the 
same bit, except when both input bits are 1. Notice that no communication is allowed between 
them. A moment's reflection shows that their best strategy is to always output, say, 0. This allows 
them to win on three of the four possible inputs. It is also not difficult to show that equipping 
them with a shared source of randomness cannot help: the average success probability over the 
four possible questions will always be at most 75% (simply because one can always fix the shared 
randomness so as to maximize the average success probability). This bound of 75%, known as 
the Clauser-Horne-Shimony-Holt (CHSH) inequality, is the simplest example of a Bell inequality 

IE S3. 

A remarkable and well-known fact is that if Alice and Bob are allowed to share quantum entan- 
glement then they can win the game with probability ~ 85%, no matter which questions are asked. 
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Indeed, sharing entanglement allows remote parties to realize correlations that are impossible to 
obtain classically, without imparting them with the ability to communicate instantaneously. This 
distinction is one of the most peculiar aspects of quantum theory and required many years to be 
properly understood |15l [6|. 

In this paper we address the topic of quantum correlations from a communication complexity 
perspective. Namely, we are asking how many bits of communication are needed to explain the 
phenomenon of quantum correlations. More precisely, we consider the following communica- 
tion complexity problem, corresponding to the quantum mechanical scenario of a shared bipartite 
quantum state p and local two-outcome measurements A and B, with the goal being to simulate 
the correlation (i.e., the parity) of the measurement results. 



Problem 1 Simulating quantum correlations 



Alice's input: 


A d 2 x d 2 positive semidefinite matrix p with trace 1 representing an op- 




erator on the space C d (8) C d and a d x d Hermitian matrix A with ±1 




eigenvalues. 


Bob's input: 


The (same) matrix p and ad x d Hermitian matrix B with ±1 eigenvalues. 


Alice's output: 


A bit a £ {-1,1}. 


Bob's output: 


A bit /3 £ {-1,1}. 


Goal: 


The correlation E[«j8] should satisfy E[«j8] = Tr (A <g> B • p) . 



As we discuss in the open problems paragraph, this problem is a special case of the problem 
of simulating local measurements on quantum states, in which the goal is to simulate the entire 
output (as opposed to just the correlation) as well as to handle m-outcome measurements for 
m > 2. 

In fact, this communication complexity problem can be stated in an entirely classical and much 
simpler language which we shall adopt from now on. The equivalence between the two formula- 
tions was established by Tsirelson |3T|, and will be described in Appendix lAl 

Problem 2 Simulating quantum correlations (classical formulation) 

Alice: Receives as input a unit vector a £ R" and outputs a bit a £ { — 1, 1} 

Bob: Receives as input a unit vector b £ R" and outputs a bit /3 £ { — 1, 1} 

Goal: The correlation E[«jS] should satisfy E[a/3] = (a,b) 



So if a = b, Alice and Bob must always output the same bit, whereas if a = —b, they must always 
output opposite bits. If, say, a is orthogonal to b, then their outputs should be uncorrected. 

To see how the game described in the beginning of this section fits into this problem, consider 
the special case in which Alice's input is either the vector aq = (1, 0) or the vector U\ = (0, 1) and 
Bob's input is either bo = 1) or b\ = —1)- Notice that (a,, bj) is — 4= if i = = 1 and 

A= otherwise. Therefore, if we are able to simulate quantum correlations in this case, then we can 
win the game with probability \ + ~ 85%. Using our earlier observations, it follows that even 
when using shared randomness, one cannot solve Problem [2] without any communication, i.e., at 
least one bit of communication is required. 
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Previous work: The problem of simulating quantum correlations was introduced independently 
by several authors, including p3ll29l l8|. It is also closely related to a communication complexity 
problem introduced by Kremer, Nisan, and Ron [20 j. Early work concentrated on the special case 
of dimension n = 3, which turns out to correspond to the case of a shared EPR pair. The protocol 
in (HI solves this special case with 8 bits of communication; this was subsequently improved to just 
one bit 130 1 (see also |10|). Up to now, the best known protocol for the general case of Problem [2] 
required [n/2\ bits of one-way communication 2). 

There has also been considerable work on other variants of the question. For instance, one 
might consider bounds on the average communication, as opposed to the worst case communica- 
tion as we do here. The previous best result in this direction is by Degorre, Laplante, and Roland, 
who have shown that (log n)/2 + 0(l) bits of communication suffice on average (over the shared 
randomness of Alice and Bob), but in their protocol the communication in the worst case is un- 
bounded |fl3l HH . Another variant of the question allows for an additive error of at most e in 
the correlations. In this case there is a straightforward protocol that uses 0(e 2 log(l/e)) bits of 
communication, independent of n |20~]| . 

Our main result improves on all previous work by showing a solution to Problem [2] using a 
finite amount of communication, independent of the dimension n. 

Theorem 1.1. There is a public-coin protocol for exactly simulating quantum correlations using two bits 
of one-way communication. 

We note that the shared randomness is essential: there is no exact private-coin protocol which 
has bounded communication in the worst case |22] . We also mention that the marginal distribu- 
tions produced by our protocol (as well as all our intermediate protocols) are uniform. This can 
be verified from the description of the protocols. Alternatively, note that one can always obtain 
uniform marginals without changing the joint correlation by simply taking a shared random bit 
r G { — 1,1} and asking both Alice and Bob to multiply their outputs by r. 

The main question left open in the preliminary version of this work was whether the theorem 
is tight, i.e., whether there is a one bit protocol for the problem. This question has recently been 
resolved by Vertesi and Bene |32| who showed that no one bit protocol exists. In Section|5]we de- 
scribe some of our own attempts to prove such a result. Although our attempts were unsuccessful, 
the approaches we describe might be of interest in the future. 

Proof outline and techniques: We will start in Section|2]by describing some basic protocols. All 
of these protocols have the property that for any input a, b, E[#j6] = h((a,b}) for some function 
h : [—1, 1] — > [—1, 1], i.e., the correlation between the outputs depends only on the inner product 
between the input vectors. (In fact, any protocol can be transformed into one that has this prop- 
erty: by using the shared randomness, Alice and Bob can apply a random orthogonal rotation to 
their inputs; then, it is not difficult to prove that the resulting distribution on inputs depends only 
on the inner product between the original inputs.) 

Our goal, of course, is to come up with a protocol whose 'correlation function' h is simply 
h(x) = x. We therefore analyze the correlation functions of our basic protocols. The main part of 
the analysis is based on the calculation of areas of spherical triangles in four-dimensional space (a 
topic that was also at the heart of Karloff and Zwick's work on the approximation of MAX3SAT 
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[18J). Unfortunately, as we will see in Section^ none of our basic protocols achieves h(x) = x (see 
Figures [T] and |2] for plots of some of the correlation functions relative to the desired h(x) = x). 

Instead, we will show in Section [3] that one can take a protocol whose correlation function h 
is 'strong enough' in some precise sense and transform it into another protocol whose correla- 
tion function is the desired h(x) = x. To complete the proof, we will show in Section 0] that the 
correlation function of our '2-bit orthant protocol' is strong enough. 

The transformation shown in Section [3] is the heart of our construction. The idea is to carefully 
choose a mapping C from R" to another (infinite-dimensional) Hilbert space with the property 
that for any vectors a and b, {C(a),C(b)) = f((a,b)) for some function / : [—1,1] — » [—1/1]. 
Then, in the transformed protocol, Alice and Bob simply run the original protocol on inputs C(a) 
and C(b). Clearly, this results in a protocol with correlation function g(x) = h(f(x)) where h 
is the correlation function of the original function. In order to achieve the desired correlation 
function g(x) = x we need to choose / to be hr l (assuming it is well-defined of course). Intuitively 
speaking, the purpose of C is to slightly weaken the correlation function so that it matches the 
desired h(x) = x. 

The main effort, therefore, is in constructing a mapping C with the property that {C(a),C(b)} = 
h^ 1 ( (a, b)). To demonstrate how such a thing can be achieved, assume, for simplicity, that we have 
h^ 1 (x) = x 3 . Then we can choose C to be the mapping v i— > v <8> v <8> v where <8> denotes the tensor 
operation. It then follows from the definition that for any vectors a and b, 



as required. In reality, the function h will be much more involved, and we will construct C based 
on its power series expansion. 

The idea of using a power series combined with a mapping C as above originates in Krivine's 
work on Grothendieck's constant |2Tf. More recently, Alon and Naor [2 J showed that Krivine's 
method can be interpreted as an algorithmic rounding technique for a certain family of semidefi- 
nite programs, and this has since been extended in a series of papers (see, e.g., lfTTll3l[T|). As far as 
we know, our result is the first application of Krivine's method to communication complexity. 

Open problems: The problem we consider in this paper is a special case of the more general 
problem of simulating local measurements on quantum states. Here, as in our problem, Alice and 
Bob are given (the classical description of) a bipartite quantum state p on C d <S> C d . In addition, 
Alice is given an m-outcome measurement A and Bob is given an m -outcome measurement £>. 
The goal is for Alice and Bob to output indices a, B G [m] that are distributed as if they actually 
performed the measurements A and B on p. 

The complexity of this general problem is still not well understood, even for very special cases. 
Note that we do not resolve the m = 2 special case in this paper: although our protocol gives 
the correct correlations, it generates uniform marginal distributions, and not those predicted by 
quantum theory. The only case that is essentially resolved is the case d = m = 2 (9ll30|. Beyond 
that, no exact protocol with bounded worst-case communication is known, even for [d, m) = (2, 3) 
or (d,m) = (3,2). Let us mention some other known results. First, Brassard, Cleve, and Tapp 
have established that O(d) bits of communication are necessary for exact simulation of d-outcome 
measurements on the maximally-entangled state in C d <8> C d |8|. Massar, Bacon, Cerf, and Cleve 
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have shown that there is an exact private-coin protocol for this problem that uses 0(d log d) bits 
of communication on average |22|. On the other hand, the same authors have shown that any 
exact protocol with bounded worst-case communication requires an unbounded number of public 
coins [22 J. Finally, Shi and Zhu have shown that it is possible to simulate the required distribution 
to within variational distance e using 0(m 6 / e 2 log(m/e)) bits of communication [28]. 

Outline: In Section [2] we present our basic protocols, and calculate their correlation functions. 
None of these protocols has the right correlation function. Then, in Section [3] we show a general 
technique to take any protocol with a 'strong enough' correlation function, and transform into one 
that achieves the right correlation function h(x) = x. This part is based on Krivine's power series 
method. Finally, in Section H] we complete the proof by showing that one of our basic protocols, 
the '2-bit orthant protocol', indeed has a strong enough correlation function. In Subsection 14.11 
we show a slightly better protocol that communicates roughly 1.82 bits on average. There is a 
discussion of lower bounds in Section |5l 

2 Basic Protocols 

In this section we present a number of basic communication protocols, and calculate their correla- 
tion functions. None of these protocols has the right correlation function, but later we will show 
how to modify them so that the right correlation function is obtained. 



2.1 Protocol with no communication 

The following simple protocol uses no communication and is included for completeness. It is 
based on the 'random hyperplane' idea used in [6l lT7tlT6|| . 



Protocol 1 


Random Variables: 


Alice and Bob share a unit vector A G R n chosen uniformly at ran- 




dom from the unit sphere. 


Alice: 


Alice outputs oc = sign((a, A)). 


Bob: 


Bob outputs /3 = sign((fc, A)). 



Lemma 2.1. The output of Protocol\T\satisfies 

2 

E[«j6] = — arcsin((fl, b)). 
In other words, its correlation function is h(x) = j- arcsin(x). 

Proof. Let ft denote the projection of A on the space spanned by a and b, normalized to be of 
norm 1. By symmetry, ft is distributed uniformly on the unit circle in that two-dimensional space. 
Therefore, 

1 

Pr(a = Pr(sign((g,fl)) 7^ sign((^, b))) = — arccos((fl, b)). 
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It follows that 
as required. 



2 

E[a/3] = l-2Pr(« £ jS) = - arcsin((a, b)), 



□ 



2.2 The majority protocol 

We now present a natural extension of the protocol in the previous section. This protocol, which 
we call the 'majority' protocol, will not be used in the sequel; instead, we will later describe a more 
efficient protocol. We present the majority protocol because its analysis is somewhat simpler and 
so it may be useful for generalizing our technique to simulate stronger correlation functions. 

The majority protocol, given as Protocol^ is parameterized by a fixed even integer k > and 
uses k bits of one-way communication. The idea is essentially to repeat the naive random half- 
space procedure from the last section k + 1 times, and then output bits a, /3 so that their product is 
equal to the majority of the k + 1 products ao/^o, . . . , a/ c j6jc of the outputs of the individual protocols. 
The naive way of implementing this would require sending k + 1 bits from Alice and Bob. Namely, 
Alice outputs 1 and sends ccq,. . to Bob who outputs MAJ(aoj6o/ a ijSi/ • • • , a kftk)- Instead, a 
simple trick allows Protocol |2] to use only k bits: Alice outputs <x.q and sends ol\, . . . , ftjt to Bob who 
outputs MAJ(j6 ,flk)«i|6i,...,ao«jtj8fc). 

As k grows, the correlation function produced by the protocol becomes stronger, as shown in 
Figure [TJ It turns out that k = 4 bits are sufficient to be able to simulate quantum correlations. The 
proof of this fact is omitted since we will instead use the more efficient 'orthant' protocol described 
in Subsection [23] below. 





k = 

k = 2 
k = 4 




/ 







-1 -0.5 0.5 1 

Figure 1: Correlation functions obtained by the majority protocol relative to the line h(x) = x 
Letgf AJ : [0,1] -» [-1,+1] be defined by 

«T I (p) = l-2^f*"t 1 )(l-p)'^ 1 - i . 

!=0 V / 
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Protocol 2 



Random Variables: 

Alice: 

Bob: 



Alice and Bob share k+1 unit vectors A; 6 R" for i = 0, 1, . . . , k, cho- 
sen independently and uniformly at random from the unit sphere. 
Let 0L{ = sign((fl, A;)) for i = 0,1,..., k. Alice outputs a = olq and 
sends to Bob the k bits olqol\, . . . , dcqdc^. 
Let f>i = sign( (b, A,) ) for i = 0, 1, ... , fc. Bob outputs 

$ = MAJ(/S , «o«i£i, • • • / &o°<-kh)> 
where MAJ is the majority function. 



Let 

^(x)=^(±aiccos(x)). 
Lemma 2.2. T//e correlation function of Protocol\2\is h 1 ^^ . 

Proof. Because the unit vectors A, are chosen independently the events a, = j6, for j = 1, . . . , k + 1 
are independent. Letp = Pr(a, 7^ jS,-) = (1 — E[aij8,-]) 12, which is independent of i. By Lemma l2.1[ 

1 

p = — arccos((«, b)). 

Thus 

fc/2 /J-_|_1\ 

pr(^ = -i) = Ef7 A (i- P )y +i - 1 . 

Noting that E[a/3] = 1 — 2Pr(a/3 = —1) completes the proof. □ 
2.3 The orthant protocol 

In this section we present a more efficient protocol that, in some sense, seems to give the strongest 
possible correlations. The protocol is parameterized by an integer k > 0, and uses k bits of one- 
way communication. We call it the 'orthant protocol' since it is based on the partitioning of k + 1 
dimensional space into its 2 k+1 orthants (where an orthant is the higher-dimensional analogue of 
the two-dimensional quadrant). As we shall see below, the correlation function achieved by this 
protocol is determined by certain areas on the surface of the sphere in k + 2 dimensions. Such 
questions seem difficult in general (see |18J). Luckily, for our purposes it suffices to consider the 
low-dimensional cases k = 0,1,2 since the k = 2 protocol already yields correlations that are 
strong enough. The correlation functions produced by the protocol are shown in Figure |2] 

The protocol is given as Protocol |3l Roughly speaking, Alice and Bob start by projecting their 
vectors onto a random k + 1-dimensional subspace. Alice then sends to Bob the orthant inside the 
k + 1-dimensional space in which her vector lies, and Bob uses the half-space determined by this 
orthant to determine his output. To be more precise, instead of a random orthogonal projection 
we use here a random Gaussian matrix G. This leads to a much cleaner analysis, and moreover, in 
the limit of large n, the two distributions are essentially the same. We also use the same trick used 
in the majority protocol to reduce the communication from the naive k + 1 bits to k bits. 
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Figure 2: Correlation functions obtained by the orthant protocol relative to the line h(x) = x 
Protocol 3 



Random Variables: 

Alice: 
Bob: 



Alice and Bob share a random (k + 1) x n matrix G each of whose 
entries is an independent standard normal variable, i.e., a normal 
variable with mean and variance 1. 

Let oti = sign((Gfl);) for i = 0,1, ...,k and let c,- = a.Q0Ci for i = 
l,2,...,k. Alice outputs kq and sends to Bob the k bits C\,. . . , c k . 
Bob outputs 



sign 



(Gb,(l,ci,...,c k )) 



We now analyze the correlation function given by this protocol. For any unit vectors a, b £ R", 
the output of the protocol satisfies 

E[a • (6] = E[sign[a • {Gb, (l,c lr . . . ,c k ))}] 
= E[sign[(Gfo, (ao,«i/..., %))]], 

where expectations are taken over the choice of G. The expression inside the last expectation is +1 
or — 1 depending on whether Gb is in the half-space defined by the center of the orthant containing 
Ga. By symmetry it is enough to consider the positive orthant, and hence the above is equal to 



2 fc+2p r 



J](Gb),- > and V0 < i < k.{Ga)i > 

! = 



1. 



(1) 



We now claim that the joint distribution of Ga and Gb is a 2k + 2-dimensional Gaussian variable 
with mean and covariance matrix 



M 



I pi 
pi I 
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where each I is a (fc + 1) x (k + 1) identity matrix and p denotes the inner product (a,b). To 
see this, notice that by the rotational invariance of the Gaussian distribution, we can assume that 
a = (1, 0, . . . , 0) and b = (p, a/1 — p 2 , 0, . . . , 0). The claim now follows by using the fact that 
the first two columns of G are two independent (k + 1) -dimensional standard Gaussians, i.e., a 
Gaussian with mean and covariance I. 

Our next observation is that the probability in Eq. Q]) depends only on the sum of coordinates 
of Gb. We therefore define the real random variable Z to be jj^ =0 (Gb)i. The joint distribution of 
Ga and Z is given by a {k + 2) -dimensional Gaussian with mean and covariance matrix 



M' = AMA* 



( 1 

1 



\P P 








P 
P 



\ 



1 P 
P * + l J 



where A is the linear transformation taking (Ga, Gb) to (Ga,Z). We therefore see that the proba- 
bility in Eq. Q} is exactly the probability that a vector sampled from a Gaussian distribution with 
mean and covariance matrix M' is in the positive orthant. 

By the Cholesky decomposition, we can write M' = C*C for the (k + 2) x (k + 2) matrix 



/ 1 




c 




\ 






1 





p 
p 



\ 



v/(fc + l)(l-p2) J 



It is easy to see that 



C 



-l 






1 







fl)(l 

p 


-P 2 ) 


V( k 


fl)(l 


-P 2 ) 




p 




V( k 


fl)(l 

1 


-P 2 ) 




1)(1- 


P 2 ) 



J 



Since (C^ 1 ) t M'C^ 1 = I, applying the linear transformation (C _1 ) f to a Gaussian random variable 
with mean and covariance matrix M' transforms it into a standard Gaussian variable. Under 
this transformation, the positive orthant, which is the cone spanned by the standard basis vectors, 
becomes the cone spanned by the rows of C . We conclude that the probability in Eq. ([T]) is 
exactly the probability that a vector sampled from a standard Gaussian distribution is in the cone 
spanned by the rows of C _1 . By the spherical symmetry of the standard Gaussian distribution, we 
can equivalently ask for the relative area of the sphere S k+1 C R k+2 that is contained inside the 
cone spanned by the rows of C _1 . 
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The case k = 0: We can now compute the probability in Eq. <(T]) for each of k = 0, 1, 2. We start 
with the simplest case of k = 0. Here, we are interested in the relative length of the circle S 1 con- 
tained in the cone spanned by the rows of C _1 . Obviously, this is given by the angle between the 
two vectors divided by 2n, which is arccos(— p) I (2n). Hence by Eq. Q} the correlation function 
in this case is simply 

2 2 
hn RT (p) '■= — arccos(— p) — 1 = — arcsin(o). 

7T TC 

We could also obtain this result by noting that the k = protocol is essentially identical to the one 
from Section |ZT1 




Figure 3: A spherical triangle 



The case k = 1: We now analyze the more interesting case k = 1. Here, we are interested in 
the relative area of the sphere S 2 contained in the cone spanned by the three rows of C _1 . The 
intersection of S 2 with a cone spanned by three vectors is known as a spherical triangle, see Figure 
|3] Its area, as given by Girard's formula (see, e.g., [7, Page 278]), is CC\ + «2 + #3 — tc where cl\, air #3 
are the three angles of the triangle (as measured on the surface). In more detail, if V\, Vi, v$ are the 
vectors spanning the cone, then ot\ is the angle between the two vectors obtained by projecting V2 
and V3 on the plane orthogonal to V\ (and similarly for a.2 and #3). In our case, the cone is spanned 
by vi = {^2{l-p 2 ),0,-p), v 2 = (0, ^2(1- p 2 ),-p), and v 3 = (0,0,1). Clearly a 3 = zr/2 and 
a short calculation shows that 0i\ = ol% = arccos(— pi \/2). Plugging this into Girard's formula, 
and using the fact that the area of the sphere is 4zr, we obtain that the relative area of S 2 contained 
in the cone spanned by the rows of C _1 is (2arccos (-p/V2) - 7r/2)/(47r). Hence by Eq. <ffl) the 
correlation function in this case is 

h? RT (p) := -arccos(-p/v / 2) - 2 = - arcsin(p/ V2). 

71 TC 

The case k = 2: We finally arrive at the most important case k = 2. Here we are considering 
spherical tetrahedra, defined as the intersection of S 3 with a cone spanned by four vectors. Unlike 
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the case of spherical triangles, no closed formula is known for the volume of a spherical tetrahe- 
dron (see Ifl8| for further discussion and references). Fortunately, there is a simple formula for the 
derivative of the volume, as we describe in the sequel. 

We start with some preliminaries on spherical tetrahedra, closely following Appendix A in 
|T8 | . A spherical tetrahedron is defined by four unit vectors vq, V\, v 2 , v 3 S S 3 forming its vertices. 
For < i < j < 3 let 9jj = arccos((u;, vt)) be the angle between Vj and vt. Equivalently, fly- 
is the spherical length of the edge ij. Another set of six parameters associated with a spherical 
tetrahedron are its dihedral angles A,y, < / < / < 3, describing the angle between the two faces 
meeting at the edge ij. They are defined as 

. (BoAPiAB2,foAOlAt) 3 ) 

A01 = arccos 1 n r 

\vq A v\ A v 2 \ \vq A V\ A C3 1 

and similarly for the other five dihedral angles, where the high-dimensional inner product is defined 
as 

/ {a x ,bi) (avfa) {a\,h) 



(fli A a 2 A a 3 , b\ A b 2 A b 3 ) = det 
and the high-dimensional norm is given by 



(az,h) {a 2/ b 2 ) {a 2 ,b 3 ) 

\ (a 3 ,bi) («3/&2> («3/&3> 



1 /2 

\a\ A a 2 A a 3 \ = \a\ A a 2 A a 3 , a\ A a 2 A a 3 ) 

Finally, in order to compute the volume of a spherical tetrahedron we use a formula due to Schlafli 
|26J, which says that for every < i < j < 3, 

8Vol _ % 

3A~ " y 

where Vol = Vol(Aoi, A02, A03, A12, A13, A23) is the volume of a spherical tetrahedron with the given 
edge lengths. 

Our goal is to compute the volume of the spherical tetrahedron whose vertices are the rows of 
C _1 normalized to be of norm 1, 

Vq = 



3-3p 2 ,0,0,-^ /^3-2p 2 
vi = (0, ^3-3p 2 ,0,-p) /^3-2p 2 



v 2 = (^0,0, ^3 - 3p 2 , -p ) /\I3 - 2p 2 
v 3 = (0,0,0,1). 
From this it easily follows that 



#03 = % = 023 = arccos(- i o/^3 - 2p 2 ) and 8 01 = 8 02 = 6 12 = arccos(p 2 /(3 - 2p 2 )). 
Moreover, a straightforward calculation reveals that 

A03 = A13 = A23 = n/2 and A i = A 2 = A i2 = arccos (-p/y/3 ), 
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and that the derivative of the latter term as a function of p is (3 — p 2 ) 1 ^ 2 . By using Schlafli's 
formula and integrating along p, we obtain that the volume of our spherical tetrahedron is 

/ 5 ■ — arccos 
J-i 2 

where we used that for p = —1 this volume is 0. Since the total area of S 3 is 2n 2 , we obtain using 
Eq. (0 that the correlation function in this case is 

12 rP a^oos^/Q-^)) _ 

3 Simulation of the Joint Correlation 

In this section we describe how to take any protocol whose correlation function is 'strong enough', 
and use it to solve Problem |2j This section as well as the next one rely on some basic facts from the 
theory of real analytic functions which can be found in, e.g., [19 J. As we said earlier, the idea is to 
carefully choose a mapping C such that when Alice and Bob apply the protocol on C(a) and C(b), 
the resulting correlation function will be correct. 

Protocol 4 Transformed protocol 

Alice and Bob map their vectors to C(a) and C(b) and run the original protocol on these vectors. 

Fix some arbitrary correlation function h : [—1,1] — ► [—1,1]. We now give sufficient conditions 
on h under which the required transformation C exists. First, we require that h(l) = 1 and that h 
is odd, continuous, and monotonically increasing. Moreover, we require that its series expansion 
about 0, 

00 

h(x) = '£c a+l x 2k +\ (3) 
fc=0 

converges to h(x) on the interval (—1,1), which implies that h is (real) analytic on ( — 1, 1). Finally, 
we require that C\ > and C2k+i < for all k > 0. 

In Section H] we will show that the orthant protocol with k = 2 satisfies these properties. A 
crucial fact for our protocol is that under the above requirements on h, the power series of hr x 
converges on [—1, 1] and all its coefficients are nonnegative. This is shown in the following lemma. 

Lemma 3.1. If h satisfies the above conditions, then hr 1 has a power series expansion 

CO 

fc- 1 (x) = £d a+1 x a+1 (4) 

k=0 

that converges on [—1, 1] and satisfies — Ofor all k > 0. 

Proof. We first notice that under the above conditions, the power series in Eq. ([3]) converges to 
h also at the endpoints —1, 1. This is easy to prove and follows from Abel's lemma, which says 
that if all but finitely many of the coefficients of a power series are nonnegative (or nonpositive), 
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then the value of the series at the endpoints is given by the limit of its values as we approach the 
endpoint. We hence see that X^l c 2k+i = 1- 

It also follows easily that the inverse function h^ 1 : [—1,1] — > [—1,1] is well-defined and is odd. 
Moreover, by the real analytic inverse function theorem (see |T9l Theorem 1.5.3]), h^ 1 is analytic on 
(—1,1) and hence has a series expansion about x = 0, as in Eq. In order to analyze this series, 
we use a known formula for the coefficients of an inverse function (see, e.g., [24l Eq. (4.5.12)]): 

, 1 _ {k)(k + l)---(k-l + £ 1 +£ 2 + ---) f c 2 \ h ( c 3 



where the sum runs over nonnegative integers satisfying l\ + 7.£ 2 + 3^3 + • • • = k — 1. Since in our 
case every term in the sum is nonnegative, it follows that > for all k, as required. 

It remains to show that the series converges on [—1, 1]. In fact, it is sufficient to show that the 
series converges on (—1,1): convergence at the endpoints —1,1 would follow by Abel's lemma, 
as before. We do this by showing that < 1/k, as this immediately implies that the power series 
converges on the interval (—1, 1). Using the above formula, we get that for all k > 

(2Jfc + l)(2Jfc + 2)---(2Jfc + £ 2 + 4 + "-) / c 3 V 2 ( c 5 



d2k+1 ~ (2fc + l)cf +1 ^ W^- V ~J V ~i 

where the sum runs over nonnegative integers satisfying i 2 + 2£^ + 3£g + • • • = k. We extend the 
sum to all nonnegative integers £2, ^4, • • •, obtaining 

, 1 f [2k + m\ _ ml t c 3 V*/ c 5 \<* 



2/«4 

2fc + m\ / -c 3 - c 5 



(2fc + l)cf +1 £ V « Jl C! J ' (6) 

where the inner sum in Eq. (|5]l is over all indices £2 + £4 + ■ ■ ■ = wz and we used the multinomial 
theorem to obtain Eq. ©. By our observation above, — E^Li C2jt+i = C\ — \. Set z = 1 — 1 /ci . Then 
< z < 1 and 

*»■ < - £ ( a : m >- - - - .)-<*-•> = 

since the sum is just the negative binomial series. We conclude that the power series converges to 
h^ 1 on the interval (—1, 1), which also implies convergence at the endpoints by Abel's lemma. □ 

The transformation C is obtained by applying the following lemma to h^ 1 . 

Lemma 3.2. Let f : [—1,1] — » [—1,1] be a function with a power series expansion f (x) = Y^=Q^k xk 
that converges on [—1, 1] and satisfies d^ > Ofor allk> and f(l) = 1. Then for any n > 1, there exists 
a transformation C : S"^ 1 —> S°° such that for all a, b S S n_1 , (C(a),C(fc)) = /((a,b)). 



Proof. Define 



fc=0 
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where v® denotes the vector v <8> v <8> • • • <8> v with k tensor factors. Note that this is well-defined, 
since > for all k. By definition, for any a, b £ S" _1 we have 

oo oo , 

(c(«),c(b)) = £4(3®*^®*) = X><«i} = /«*,&», 

/c=0 /c=0 

which in particular implies that C(a) is a unit vector for any a £ S n . □ 

Remark 3.3. By Schoenberg's theorem K77\ Theorem 2], the conditions on f in Lemma [372] are in fact 
necessary for the transformation C to exist. It is also known that if we are only interested in a transformation 
C for a particular value of n (rather than for all n > 1), it is sufficient (and necessary) to require that 
f, in addition to satisfying /(l) = 1, has a non-negative convergent series expansion in Gegenbauer 
polynomials if2Tll27lf . 

Theorem 3.4. Protocol\4^is well-defined and solves Problem^ 

Proof By Lemma 13.11 we can apply Lemma 13.21 to hr x to obtain the transformation C. Since C 
maps unit vectors to unit vectors, Protocol|4]is well-defined. Moreover, its output satisfies 

E[ocB} = h((C(a),C(b))) =hoh- 1 {(a,b)) = {a,b), 

as required. □ 

Remark 3.5. As mentioned in Remark l3Jl the properties ofhr 1 in the conclusion of Lemma \3.1\ are not 
just sufficient, but also necessary for Protocol E] to be well-defined. It is therefore natural to ask if the 
conditions on h in Lemma 13.11 are also necessary. It turns out that they are not: take, for example, h 
such that h~ l (x) = 0.9x + O.lr 3 , calculate that h(x) = l.llx — 0.15x 3 + 0.06x 5 + 0(x 7 ), and notice 
that the coefficient of x 5 is positive. So is there a necessary and sufficient condition? We do not know. 
Looking at Figure |3j one might be tempted to replace the condition that c\ > and c^k+i < for all 
k > with the weaker condition that h(x) > x for x > 0. But this condition is not sufficient: the 
function h(x) = x + O.lx 3 — O.lx 5 satisfies h(x) > x for x > (as well as our other requirements), but 
h- l (x) = x-O.lx 3 + 0(x 5 ). 



4 Analysis of the Power Series 

In this section, we show that the orthant protocol with k = 2 satisfies the requirements listed in 
Section|3]and hence can be used to simulate quantum correlations with only two bits of communi- 
cation. A similar but much more involved analysis holds also for the majority protocol with k = 4 
and implies a protocol with four bits of communication. We omit this analysis since the orthant 
protocol is superior in all respects. 

Lemma 4.1. Let h(x) = hj^^x) be as given in Eq. 10. Then h(l) = 1 and h is odd, continuous, and 
monotonically increasing. Moreover, it is (real) analytic on ( — 1, 1), and its power series about x = 0, 

oo 

h(x) = ^c 2k+1 x 2k +\ 
satisfies c\ > and Cz^+i < Ofor all k > 0. 
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Proof. The first four conditions are obvious. Moreover, being composed of analytic functions, h is 
easily seen to be analytic on ( — 1,1). We now show that the coefficients c 2 ^ + i have the right sign. 
From the derivative 

12arccos(x 2 /(3-2x 2 )) 



h'{x) 



it follows that C\ = h'(0) = 2y/3/ n > 0. To show that the rest of the coefficients are negative, 
consider the second derivative, 

h"(x) = -^H 1 (x 2 )H 2 (x 2 ) 

where 

Hl{t)= (3-0 3/2 (3-2f)' (7) 

tt (A / 3(3-Q 3-2t 
H 2 (t) = \ — arccos 



t 2 \3-2t 

It is clear from Eq. 10 that all the coefficients in the power series of H\ about are positive. There- 
fore, it is sufficient to show that all the coefficients in the power series of H 2 are positive. We 
calculate H 2 (0) = 3 - 3tt/4 > and H' 2 (0) = (3 + n)/2 > 0. Next, we calculate 

^3 /„ 3 \ 1 



„ ?(f) ^( 7+ _l_) 



(3-20(l-i) 3/2 V / 3 rr f 

Hence all coefficients in the power series of H 2 are positive, as required. □ 
4.1 The 1.82 bit protocol 

In this section we observe that the amount of communication can be lowered to 1.82 bits on aver- 
age by performing the k = 1 orthant protocol with probability 

S+(V6-2) n 



and the k = 2 orthant protocol the remainder of the time. This is the largest value of p for which 
our protocol works. One could possibly obtain a slightly better protocol by directly modifying the 
k = 2 orthant protocol, but the analysis seems to get too complicated. 

Lemma 4.2. Let h(x) = phf RT (x) + (1 — p)h.2 RT (x). Then h(l) = 1 and h is odd, continuous, and 
monotonically increasing. Moreover, it is (real) analytic on ( — 1, 1), and its power series about x = 0, 



H x ) = I] c 2k+1 x 



lk+1 



k=0 

satisfies that c\ > and c 2 k + i < Ofor all k > 0. 
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Proof. The first five properties are easy to verify as before. A short calculation shows that c\ > 0. 
Then calculate 



2Ax 



h"(x) = ^H!(^ 2 )H 2 (x 2 



7V 



where 



Hi(t) 
H 2 (f) 



(2 - f) 3/2 



Hs(0 



3/2 




H 3 (f) = (2-t) 



It is clear that the coefficients C2jt + i will be nonpositive for all k > if Hi(f) and Hiit) have 
series expansions with nonnegative coefficients. This is clear for H\[t). For H2(t), first notice 
that H2(0) = (this explains our choice of p) and then note that it has a series expansion with 
nonnegative coefficients if Hs(t) does. We calculate H^(0) = (4 — n)/ y/2 > 0, and differentiate to 
obtain 



2 v / 3^ r T (5 - 40 



+ arccos 



V3(3-2f) 2 (l-f) 3/2 V3-2^ 
From this we calculate H' 3 (0) = (20 + 97r)/12V2 > and then differentiate again, finding 

3^3 



H 4 (f), 



where 



H 4 (t) 



4^2- f 

79 - 157f + 85f 2 + lit 3 - 20f 4 + 4£ 5 



: arccos 



(3 - 2£) 3 (1 - t)5/ 2 V3=l 2^3 V3 - 2t y 

We calculate H 4 (0) = (316 - 277r)/ 108^/3 > 0, differentiate once more and find that 



H 4 (f) 



54v/l -f(3-f) 3/2 
59616£ 5 

+ 



1297 + 



+ 



9399£ 



30696J 2 



66116£ 3 



(3-2t) (3-2£) 2 (3-2£) 3 
8748£ 6 540£ 7 



115080^ 

(3-2f) 4 



+ 



(3-2f) 4 (l-£) (3 - 2f) 4 (l - 2 (3-2f) 4 (l-£) 3 



which we have written in a form that makes it clear that H 4 (f) has a series expansion with non- 
negative coefficients. Tracing backwards through the proof, we conclude that the coefficients in 
the series expansion of h(x) about x = have the desired property. □ 



5 Lower Bounds 

As mentioned in the introduction, it has recently been shown by Vertesi and Bene [32J that our 
main theorem is tight, i.e., no one bit protocol exists for Problem [2] Here we describe some of 
our own attempts to prove this, which, although unsuccessful, might shed further light on the 
complexity of the problem. 



16 



Consider the special case when a and b are both uniformly distributed in S" but constrained 
so that (a, b) = ±(1 — e) with < e <C 1. Given a one bit protocol V, define the function 

B„(e) = 2 - E {iUM _ e \&p[*fl] + E (aS)= _ 1+e [E P [«jS]] , 

where the outer expectations are taken over all vectors a,b G S" _1 with inner product ±(1 — e) 
and the inner expectations are taken over any shared randomness used by the protocol V. If V 
solves Problem 121 then we necessarily have Ep[a/3] = (a,b), and hence B n (e) = 2e for all n and 
e. Our earlier analysis shows that for the orthant protocol (Protocol [3j) with k = 1, as e goes to 0, 
B„(e) approaches 8e/ n > 2e. We conjecture that for sufficiently large n and sufficiently small e, all 
one-bit protocols satisfy B n (e) > 2e (and therefore do not solve Problem|2]). In fact, we conjecture 
that the orthant protocol with k = 1 is optimal for B n (e), i.e., we conjecture that for all one-bit 
protocols, lim n ^oo, £ ^o B n (e)/e > 8/ n. 

One approach to prove these conjectures is the following. First, since we are only interested 
in minimizing the value of B n (e) and not in obtaining the correct correlations, we can restrict 
attention to deterministic protocols. Any deterministic protocol partitions Alice's sphere S" _1 into 
four sets R{oc, c), depending on which bit a. she outputs and which bit c she sends. Once we have 
specified Alice's strategy, we can assume Bob acts optimally to minimize B n (e). The contribution 
to B n (e) comes from regions near which R(— 1, c) meets R(+l, c), since it is in these areas that Bob 
cannot tell whether Alice outputs +1 or —1, and hence cannot correlate his answer perfectly with 
Alice's. Therefore, in order to prove the conjectures, one should argue that any protocol V must 
have local regions where R(— 1, c) meets R(+l, c) and that the way these regions meet in the k = 1 
orthant protocol is optimal. Formalizing this notion would seem to require topological arguments, 
perhaps an extension of the Borsuk-Ulam theorem. 

In another attempt to shed light on the problem, we show now how to extend a lower bound 
of Barrett, Kent, and Pironio 0, who improved on an earlier result of Pironio ||25| . Barrett et 
al. showed that if we examine the transcript of communication between Alice and Bob of any 
protocol for Problem^ then with probability 1 (over the shared randomness used by the protocol) 
the transcript must show some communication. In other words, it cannot be the case that Alice and 
Bob sometimes output results using shared randomness alone. But this leaves open the possibility 
that, say, Alice almost always sends the same message to Bob. 

Here, we show a lower bound on the (min-)entropy of the communication transcript. More 
specifically, we show an upper bound on the maximum probability with which a transcript can 
appear in a protocol for Problem [21 

Proposition 5.1. There exists a distribution on inputs such that in any protocol that solves Problem [2] 
no transcript can appear with probability greater than (3 — \/2)/2 0.79 when applied to this input 
distribution. 

Proof. Let P be a protocol that solves Problem |2j As mentioned in the introduction, P in particular 
allows us to solve the following problem with probability \ + ~ 0.85: Alice and Bob receive 
bits a and b respectively, and their task is to output one bit each in such a way that the XOR 
of the bits they output is equal to AND(a, b). Assume the bits a and b are chosen uniformly at 
random, and consider the resulting distribution on transcripts created by P. Consider the most 
likely transcript T and let p denote the probability with which it occurs. We now construct a 
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protocol P' with no communication as follows. Alice checks whether the transcript T is consistent 
with her input. If so, she outputs a bit as in P; if not, she outputs a random bit. Bob does the same. 
Note that with probability p, P' behaves identically to P. With probability 1 — p, however, at least 
one of the parties detects that the transcript is not consistent with his or her input and outputs a 
random bit. By the definition of the problem, in this case the success probability is |. Therefore 
the overall success probability of P' is at least 

1 _ 1 l-p 

which must be at most | by the CHSH inequality. □ 
Acknowledgements 

Part of this work was done while the authors were visiting the Institut Henri Poincare as part of 
the program "Quantum information, computation and complexity", and we would like to thank 
the organizers for their efforts. We thank Aram Harrow for discussions about lower bounds, Falk 
Unger for assistance with the proof of Lemma 13.11 and Peter Harremoes for discussions about 
Schoenberg's theorem. 

References 

[1] N. Alon, K. Makarychev, Y. Makarychev, and A. Naor. Quadratic forms on graphs. Invent. 
Math., 163(3):499-522, 2006. 

[2] N. Alon and A. Naor. Approximating the cut-norm via Grothendieck's inequality. SIAM J. 
Comput., 35(4):787-803, 2006. Preliminary version in STOC'04. 

[3] S. Arora, E. Berger, E. Hazan, G. Kindler, and S. Safra. On non-approximability for quadratic 
programs. In Proc. of the 46th Annual IEEE Symposium on Foundations of Computer Science 
(POCS), pages 206-215, 2005. 

[4] D. Bacon and B. F. Toner. How to simulate quantum correlations. Unpublished. 

[5] J. Barrett, A. Kent, and S. Pironio. Maximally nonlocal and monogamous quantum correla- 
tions. Phys. Rev. Lett., 97:170409, 2006. 

[6] J. S. Bell. On the Einstein-Podolsky-Rosen paradox. Physics, 1:195-200, 1964. 

[7] M. Berger. Geometry. II. Universitext. Springer- Verlag, Berlin, 1987. 

[8] G. Brassard, R. Cleve, and A. Tapp. Cost of exactly simulating quantum entanglement with 
classical communication. Phys. Rev. Lett., 83:1874-1877, 1999. 

[9] N. J. Cerf, N. Gisin, and S. Massar. Classical teleportation of a quantum bit. Physical Review 
Letters, 84:2521, 2000. 

[10] N. J. Cerf, N. Gisin, S. Massar, and S. Popescu. Simulating maximal quantum entanglement 
without communication. Phys. Rev. Lett, 94(22) :220403, 2005. 



18 



[11] M. Charikar and A. Wirth. Maximizing quadratic programs: extending Grothendieck's in- 
equality. In Proc. of the 45th Annual IEEE Symposium on Foundations of Computer Science (FOCS), 
pages 54-60, 2004. 

[12] J. F. Clauser, M. A. Home, A. Shimony, and R. A. Holt. Proposed experiment to test local 
hidden-variable theories. Phys. Rev. Lett., 23:880-884, 1969. 

[13] J. Degorre, S. Laplante, and J. Roland. Simulating quantum correlations as a distributed 
sampling problem. Phys. Rev. A, 72(6):062314, 2005. 

[14] J. Degorre, S. Laplante, and J. Roland. Classical simulation of traceless binary observables on 
any bipartite quantum state. Phys. Rev. A, 75(1):012309, 2007. 

[15] A. Einstein, R Podolsky and N. Rosen. Can quantum-mechanical description of physical 
reality be considered complete? Phys. Rev., 47:777-780, 1935. 

[16] M. X. Goemans and D. P. Williamson. Improved approximation algorithms for maximum 
cut and satisfiability problems using semidefinite programming. /. Assoc. Comput. Mach., 
42(6):1 115-1145, 1995. Preliminary version in STOC'94. 

[17] A. Grothendieck. Resume de la theorie metrique des produits tensoriels topologiques. Boletim 
Da Sociedade de Matemdtica de Sao Paulo, 8:1, 1953. 

[18] H. Karloff and U. Zwick. A 7/8-approximation algorithm for MAX 3SAT? In Proc. of the 38th 
Annual IEEE Symposium on Foundations of Computer Science (FOCS), pages 406-415, 1997. 

[19] S. G. Krantz and H. R. Parks. A primer of real analytic functions. Birkhauser Advanced Texts: 
Basler Lehrbiicher. Birkhauser Boston Inc., Boston, MA, second edition, 2002. 

[20] I. Kremer, N. Nisan, and D. Ron. On randomized one-round communication complexity. 
Comput. Complexity, 8(l):21-49, 1999. Preliminary version in STOC'95. 

[21] J. L. Krivine. Constantes de Grothendieck et fonctions de type positif sur les spheres. Adv. 
Math., 31:16-30, 1979. 

[22] S. Massar, D. Bacon, N. J. Cerf, and R. Cleve. Classical simulation of quantum entanglement 
without local hidden variables. Phys. Rev. A, 63(5):052305, Apr 2001. 

[23] T. Maudlin. Bell's inequality, information transmission, and prism models. In D. Hull, 
M. Forbes, and K. Okruhlik, editors, PSA 1992, Volume 1, pages 404-417, East Lansing, 1992. 
Philosophy of Science Association. 

[24] P. M. Morse and H. Feshbach. Methods of Theoretical Physics, Part I. McGraw-Hill, New York, 
1953. 

[25] S. Pironio. Violations of Bell inequalities as lower bounds on the communication cost of 
nonlocal correlations. Phys. Rev. A, 68(6):062102, Dec 2003. 



19 



[26] L. Schlafli. On the multiple integral J n dx dy . . . dz, whose limits are p\ = a\x + b\y + • ■ ■ + 

h x z > 0, p 2 > 0,. . . , p„ > 0, and x 2 + y 2 + V z 2 < 1. Quart. /. Math, 2:269-300, 1858. 

Continued in Vol. 3 (I860), pp. 54-68 and pp. 97-108. 

[27] I. J. Schoenberg. Positive definite functions on spheres. Duke Math. J., 9:96-108, 1942. 

[28] Y. Shi and Y. Zhu. Tensor norms and the classical communication complexity of nonlo- 
cal quantum measurement. SIAM f. Comput., 38(3):753-766, 2008. Preliminary version in 
FOCS'05. 

[29] M. Steiner. Towards quantifying non-local information transfer: finite-bit non-locality. Phys. 
Lett. A, 270:239-244, 2000. 

[30] B. F. Toner and D. Bacon. Communication cost of simulating Bell correlations. Phys. Rev. Lett., 
91:187904, 2003. 

[31] B. S. Tsirelson. Quantum analogues of the Bell inequalities. The case of two spatially sepa- 
rated domains. /. Soviet Math., 36:557-570, 1987. 

[32] T. Vertesi and E. Bene. Lower bound on the communication cost of simulating bipartite 
quantum correlations, 2009. larXiv:0904. 13901 



A A classical reformulation 

The equivalence between Problem [T] and Problem [2] is due to Tsirelson [3l|. Here we sketch only 
the easy direction of this equivalence: a solution to Problem [2] implies a solution to Problem[T] 

Let p be a state on C rf <8> C rf , and let A and B be d x d Hermitian matrices whose eigenvalues 
are in {—1, 1}. The goal is for Alice and Bob to output bits oc and B such that 

E[a.B] = Tr(A®B ■ p) . 

Let a\,. . . ,a d i £ C be the d 2 entries of the matrix A ® lg ^Jp, and similarly let b\,...,b$. G C be 
those of 1a ® ^>\Jp~- Let n = 2d 2 and define the n-dimensional real vectors 

a = (Refli,. . . ,Refl rf 2,Imfli, . . .,lma d 2), 
b = (Re&i,. . .,Reb d 2,lmb lf . . .,lmb d i). 

Then 

d 2 

(a, a) = \aj\ 2 = Jr(A ® t B pA ® t B ) = Jr(A 2 ®l B -p)= Tr(p) = 1 

and similarly (b,b) = 1. Moreover, 

d 2 

(a,b) = Yj a r h ] = Jr ( A ® *b • P ■ H-A ® B) = Tr (A <g> B ■ p) . 

/'=1 

Hence, Alice and Bob can use a and b as input to Problem [2] in order to solve Problem [T] 
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